References https://www.twcert.org.tw/tw/cp-132-8134-c476d-1.html https://www.twcert.org.tw/newepaper/cp-151-8134-c476d-3.html https://www.twcert.org.tw/en/cp-139-8135-ce1e6-2.html https://avd.aliyun.com/product?prod=webeip&page=-4 https://www.twcert.org.tw/tw/lp-132-1-4-60.html https://socradar.io/labs/app/cve-radar/CVE-2024-9969 https://vulners.com/search/vendors/newtype/products/webeip/versions/3.0?year=2024
Related VulnerabilitiesPoCCVE-2026-0561: Shield Security <= 21.0.8 - Unauthenticated Reflected XSSPoCCVE-2026-28141: NextGEN Gallery <= 4.2.3 - Reflected Cross-Site ScriptingPoCCVE-2026-57582: GeoNetwork - Reflected Cross-Site ScriptingPoCCVE-2026-58191: Appium base-driver <=10.6.0 - Reflected Cross-Site ScriptingPoCCVE-2026-49069: WPZOOM Portfolio <= 1.4.21 - Reflected Cross-Site ScriptingPoCCVE-2026-64638: WordPress Core < 7.0.3 - Preauth Reflected XSS (XSS2Shell)PoCCVE-2026-52774: YesWiki Bazar Widget - Reflected XSS via 'id' ParameterPoCCVE-2026-55592: Dashy <= 4.3.6 - Reflected XSS via WorkspacePoCCVE-2025-47783: Label Studio < 1.18.0 - Reflected XSSPoCCVE-2025-61224: DokuWiki <= 2025-05-14a Librarian - Reflected Cross-Site ScriptingPoCyeswiki-reflected-xss: YesWiki - Cross-Site ScriptingPoCphpjabbers-event-booking-xss: PHPJabbers Event Booking Calendar - Reflected XSSPoCodoo-login-redirect: Reflected Odoo - Open Redirect